Static task
static1
Behavioral task
behavioral1
Sample
40a41edd07b4ed0c4221451b4a44d277_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
40a41edd07b4ed0c4221451b4a44d277_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
40a41edd07b4ed0c4221451b4a44d277_JaffaCakes118
-
Size
14KB
-
MD5
40a41edd07b4ed0c4221451b4a44d277
-
SHA1
bea896d3936820cf054b75d98a30cbf33d603e82
-
SHA256
1095397c215c758c6f143f366a0e6f00c15a6cf02e2e3a81ae043cab489e40e3
-
SHA512
06b27f4318a806880a855dd5fbf17c07dd8dd9fe9fd56d83bbb8ad0aebae779a7758430bc073186c343ac89f12258330b7916087af9c184527b178e85dd116f4
-
SSDEEP
192:8oSsing0hHvIMI3LkXKiPNTd2fPdLWtIs46z8242/g3Ih4SgpW7rU1wfXTR+k:wgsQMyYPSNLWtFTz832/gs4UY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40a41edd07b4ed0c4221451b4a44d277_JaffaCakes118
Files
-
40a41edd07b4ed0c4221451b4a44d277_JaffaCakes118.exe windows:4 windows x86 arch:x86
eda6a18d67e95e6ab3539589dc64e162
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
VirtualAlloc
GetProcAddress
GetACP
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 170B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ